Tag Archives: Marriott

As you may remember, Marriott International confirmed in November of 2018 that its hotel guest database of about 500 million customers was stolen in a data breach. The breach was related to reservations Marriott’s Starwood Properties.

Since then, some new information about the data breach has been revealed.

The New York Times reported today that Marriott International conceded that its Starwood hotel unit did not encrypt the passport numbers for roughly five million guests. The New York Times also reported:

On Friday the firm said that teams of forensic and data analysts had identified “approximately 383 million records as the upper limit” for the total number of guest reservations lost, though the company still says it has no idea who carried out the attack, and suggested the figure would decline over time as more duplicate records are identified.

The New York Times pointed to some of its previous reporting from December of 2018, when it reported “that the attack was part of a Chinese intelligence gathering effort that, reaching back to 2014, also hacked American health insurers and the Office of Personnel Management, which keeps security clearance files on millions of Americans.”

Gizmodo reported that Marriott International said that a small number of payment cards – “fewer than 2,000” – may have been stored separately and in an unencrypted format.

Marriott confirmed that its hotel guest database of about 500 million customers was stolen in a data breach.

Those who have concerns that their data may have been stolen may want to read the announcement that Marriott posted on their website. It includes a list of things Marriott is doing in response to the data breach.

Marriott says that on November 19, 2018, their investigation determined that there was unauthorized access to their guest reservation database, which contained guest information relating to reservations at Starwood properties on or before September 10, 2018. Marriott learned during the investigation that there had been unauthorized access to the Starwood network since 2014.

TechCrunch reported that Marriott said an unknown number of records contained encrypted credit card data, but has “not been able to rule out” that the components needed to decrypt the data wasn’t also taken.

This is a mess! I wouldn’t be surprised if people avoided staying at Starwood brands, or Marriott brands, in the future. Once a company has a data breach of customer’s important information, it becomes extremely difficult to regain the trust of people whose information had been stolen. I also find it troubling that it took four years between when the data breach started and when Marriott found out about it.

Slack simplifies communication for people who work for the same company. It provides a shared workspace where conversations are organized and accessible. Slack is now collaborating with Marriott and Starwood to make it easier for co-workers who need to attend a conference to figure out which hotel to stay at.

Slack has collaborated with Marriott International and Starwood Rooms. You can now compare and book Marriott and Starwood rooms directly through Slack. (This is possible because Marriott and Starwood merged in 2016.)

To do it, you need to add the Marriott Rewards app to Slack. Type /Marriottrewards and the city where you want to book hotel rooms into any Slack channel. You, and everyone else who is in that channel, will be able to see all available rooms and rates.

Not sure how it works? Slack has put together an example of a group of people looking at hotel information and voting on which one to pick. Personally, I found that watching the example made it a lot easier for me to understand how to book a hotel room on Slack. This might be very useful for people who are planning to attend BlizzCon this November.